Assessment Objective
Determine if:
- AC-18a.
- AC-18a.[01] configuration requirements are established for each type of wireless access;
- AC-18a.[02] connection requirements are established for each type of wireless access;
- AC-18a.[03] implementation guidance is established for each type of wireless access;
- AC-18b. each type of wireless access to the system is authorized prior to allowing such connections.
Assessment Methods
Examine
- Access control policy
- procedures addressing wireless access implementation and usage (including restrictions)
- configuration management plan
- system design documentation
- system configuration settings and associated documentation
- wireless access authorizations
- system audit records
- system security plan
- other relevant documents or records
Interview
- Organizational personnel with responsibilities for managing wireless access connections
- organizational personnel with information security responsibilities
Test
- Wireless access management capability for the system
Linked Issues
| Linktype | Issue |
|---|---|
| blocks | AC-18 [L] Wireless Access |